CVE-2020-21688

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2

Description A heap-use-after-free issue in the av freep function of the libavutil/mem.c component in FFmpeg allows attackers to execute arbitrary code, potentially leading to unauthorized access to confidential data, disruption of data integrity, and denial of service.

Recommendations For FFmpeg version 4.2, consider updating to a newer version that addresses this issue, as the current version allows for the execution of arbitrary code due to the heap-use-after-free vulnerability in the av freep function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.